Behavioral task
behavioral1
Sample
12681220x00000000002A0000.exe
Resource
win7-20230703-en
General
-
Target
12681220x00000000002A0000.dmp
-
Size
192KB
-
MD5
2662c03ae757e0e25f3ad0359cc65516
-
SHA1
2406b3fe74cd1bd94964fc4612ea305d42bba5cb
-
SHA256
c0549ac67d7ee87e075d36a007b0da9eafef271ce8878cf345ca6356c61bf3f5
-
SHA512
b7fc78c673c9fbad59b6e5045b471df02c52e6ea6190c4ba6e0fe8bab1a4915613e8d9a5a34522293373cf86e32abd840632fb3e796fed0b4595a28e47317785
-
SSDEEP
3072:sO64zyFlJDGx0HqSYxNXUfMim4G398e8hE:of1s0HZ8em4G39
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12681220x00000000002A0000.dmp
Files
-
12681220x00000000002A0000.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ